PT-2009-1310 · Microsoft · Windows Script Host+3

Publicado 2009-01-02 · Atualizado 2018-10-30 · CVE-2008-5823

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Money 2006

Description The issue is related to an ActiveX control in prtstb06.dll, which can cause a denial of service when used with WScript in Windows Script Host on Windows Vista. This occurs when a zero value is set for the Startup property, leading to an access violation and application crash.

Recommendations For Microsoft Money 2006, avoid using the ActiveX control in prtstb06.dll with WScript in Windows Script Host on Windows Vista, especially when setting the Startup property to zero, until a fix is available. As a temporary workaround, consider restricting the use of the ActiveX control in this specific configuration to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-5823

Produtos afetados

Money

Wscript

Windows Script Host

Windows Vista

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/47756 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5823 · Nota de Segurança
• http://jbrownsec.blogspot.com/2008/12/new-year-research-are-upon-us.html · Nota